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Abstract 

We generalize the concept of a number derivative, and examine one particular 
instance of a deformed number derivative for finite field elements. We find that the 
derivative is linear when the deformation is a Frobenius map and go on to examine 
some of its basic properties. 

1 Introduction 

The so-called "number derivative" seems to have been invented independently at least three 
times [3, 1, 4]. Here we present a generalization of the number derivative that applies to 
nearly anything one might reasonably call a number. Afterwards, we examine the case of a 
specific number derivative on finite fields and some of its basic properties. 

We generalize the concept of a number derivative to the following algorithm; in order 
to illustrate each step, we will present the corresponding step from the standard number 
derivative, denoted N, and our number derivative, denoted S. 

The notation we use below requires some care. Multiplication is denoted by a dot [■] or 
by concatenation of symbols: . The notation x n denotes a function: 

% n (y) = y n , 

so x(y) = y is the identity function and x°(y) = 1 for all y. Parentheses, when preceded by 
a function or operator, denote composition or application, respectively: 

x 2 (x n ) = (x n ) 2 = x 2n . 

Application is left associative: 

f(9)(h) = {f(g))(h), 
and takes precedence over multiplication: 

9h(f)^g(f)-h(f). 
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1. Choose a parameterized canonical form. In the case of N, this consists of representing 
each integ cr clS £L product of prime powers; the parameters are the primes. In the case 
of S, we choose a generator 9 of the finite field GF(p fc ) and express each finite field 
element as 9 n . Here, the parameter is 9. 

2. Convert this canonical form into a function. The algorithm N takes each prime power 
Pj* to a function x i i (yi) = y^. The algorithm S replaces 9 n with the function x n (y) = 

y n . 

3. Differentiate the function with respect to the parameters. The algorithm N computes 
D{f) = ~£r)(f)- The algorithm S computes the s-derivative D s (f). 

4. Evaluate the derivative at some function of the parameters, typically the identity func- 
tion. The algorithm N computes D(f)\ y . =p .. The algorithm S computes D s (f)\ y=e . 



2 Exponential quantum calculus 

We begin with the operator M s (f) = f(x s ). The s-differential is then d s = M s — x and the 
s-derivative is 

D,(!) = 

d s {x) 

The s-derivative of an element x n (9) is 

D s {x n ){9) = (9) = X —^{9) = ([n)x^)(9), 

M s (x) — x x s — x 

where 

l)n _ rJ) 

n = 



The s-deformation has many similarities to the g-deformation that results in the quantum 
calculus [2]. To get the s-deformation from the (/-deformation, one replaces the constant q 
by the function Since this is the same transformation we chose to use in the second 

step of the algorithm S, both derivatives give rise to the same number derivative. 

Since the notation is somewhat simpler for the g-derivative, we will adopt it through 
most of the paper. The operator M q = M s : 

M S U) = f(x s ) = f{x s ~ l x) = f(qx) = M q (f). 

The ^-differential is d q = M q — x and the ^-derivative is 



D q (f) 



d q (f) 



dq(x) 

The ^-derivative of an element x n (9) is 



D q (x n )(e) = M A f ( (9) = qX (9) = ([n]x^)(e), 

M q (x) — x qx — x 
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where 

q n -q° 



Also, in the portions of the paper directly concerning the algorithm S, we will usually 
omit the final application of the functions to 9. 



3 Identities 

For what functions q = x s ~ l , if any, is this number derivative linear? Let 9 a + 9 b = 6 C . Then 



0b)s _ Qc 



x s - x w 9 s - 9 

On the other hand, 



x as + ^fe _ + ^ ^ £a S + flte 



(D q (x a ) + D q {x b )){9) = - \ ' {9) 



x s - x K ' 9 s -9 

so we want the cross terms in the binomial (9 a + 9 b ) s to be zero modulo p. This only occurs 
when s is a power of p, so the derivative is linear if and only if M s is a Frobenius map. In 
the rest of the paper, we will only consider q = x s ~ l of this form. 

The derivation of the product rule is the same as that for the ^-derivative: 

DqUg) = mtJi 

M q X — X 

_ M q (f)M q (g) - M q (g)f + M q (g)f - fg 



Mg(x) - X 

qKU > M q {x)-x J M q (x)-x 
M q (g)D q (f) + fD q (g) (1) 
gD q (f) + M q (f)D q (g), (2) 



where (2) follows by symmetry. 

The same is true for the quotient rule. Since by (1), 

D q (f) = D q {g f -) 

= M q {g)D q (t) + t Dq (g), 
9 9 

we have 

j\ gDJf)-fDJg) 



D{L) = » *»> ( 3 ) 

9 gM q {g) 



M q (g)D q (f) - M q (f)D q (g) 
gM q (g) 



(4) 
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where (4) follows from (2) instead. 

Note that while there is not a general chain rule for the standard ^-derivative, we can 
use the fact that every element is of the form x n (8) to find one for this derivative: 

rM _ W))-^ B ) M ^ n ) - 
" m 1! M q (x) - x M g (x n ) - x n 

M q (g(x n )) - g(x n ) M q (x n ) - x n 

M q (x n ) - x n M q (x) - x 



M q (g(x n )) - g(x n ) 
M q (x(x n )) - x(x n ) 
D q (g)(x n ) ■ D q (x n ) 



D q {x n ) 



While the product and quotient rules (l)-(4) are the same as those typically given [2], this 
rule differs: since q is the function instead of a constant, we evaluate it at x n rather 

than take the ^"-derivative of g in the first term. 
Finally, the (/-numbers [n] satisfy 

[n + 1] = q° + q[n] and [n + 1] - [n] = q n . 



4 Constants 

Under what conditions does 

d q (x n ) = 0? (5) 

We have 

M q (x n ) -x n = 

which implies 

q n x n = x n 

and 

q n = x n(pi-l) =x = 1 

if n ^ —oo. Therefore, D q x n = if (p k — l)^^ — 1). We call elements satisfying (5) 
"constants." 

Constants behave as one might expect. Adding a constant obviously does not change the 
derivative; multiplying by a constant m scales the derivative by the same amount: 

D g (mf) = fD q {m) + M q (m)D q (f) 
= f.0 + mD q (f) 
= mD g (f) 



4 



5 The exponential function exp 



Consider the equation D q x e = x e . Then 



D q x e = [e}x e ~ l = x e 



\e]x 1 = x° 



XX Q 



x es = x s - x + 1 (6) 

so if 9 s — 9 + 1 is generated by 9 s then the equation will hold for at least one e. We may 
then define the function exp = x e ; there is no reason to prefer one solution over another. 
We use exp to illustrate a subtlety of the chain rule. One might conclude that D q (exp m ) = 



\m]x me+m - 1 : 



D q x me = D q (x e (x m )) 

= D q (x e )(x m ) ■ D q (x m ) 

= x e (x m ) ■ [m]^" 1 (7) 



x me ■ [m}x m - 1 



but (7) does not follow. It is only when applied directly to 9 that D q x e = x e . Here, D q x e is 
applied to the function x m and then to 9. 

The true equation may be found by examining the derivatives of the first few powers of 
exp: 



D q (exp 2 ) = D q (x 



2c-, 



D q (x e ■ x e ) 

x e D q (x e ) + M q (x e )D q (x e ) 
x 2e + q e x 2e 

([2]x 2 )(x e ) 



^(exp 3 ) = D q (x 3e ) 

= D q (x e ■ x 2e ) 

= x 2e D q (x e ) + M q (x e )D q (x 2e ) 
= x 3e + q e ■ (q° + q e )x 3e 
= {q°{x e ) + q\x e ) + q 2 {x e )){x e f 
= ([3]x 3 )(x e ) 
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The pattern is immedately clear: D q (exp m ) = ([m]x m )(exp), as one would hope. 

We can now prove the result by induction. Assume that D^exp^" 1-1 )) is of the form 
([m — l]x m_1 )(exp). Then 

D q (exp m ) = D q (x me ) 

= D q (x e x {m ~ 1)e ) 

= x {m - 1)e D q (x e ) + M q (x e )D q (x {m ~ 1)e ) 
= x me + q e x e ■ ([m - l]x m - 1 )(x e ) 
= ({q° + q[m- l])x m )(x e ) 
= ([m]x m )(x e ) 
= ([m]x m )(exp). 

6 Commutation 

As with the standard (/-derivative, [£) g ,x-] = M q : 

[D qi x-}(f) = D q (xf)-xD q (f) 

= fD q (x) + M q (x)D q (f)-xD q (f) 
= f + qxD g (f) - xD g (f) 
= f + d q (x)D q (f) 
= (x + d q (x)D q )(f) 

= (x + d q )(f) 
= M 9 (f) 

If we define the g-commutator [f,g] q = fg — M q (g)f, then we find that 

[D q ,x-] q (f) = D q (xf)-M q (x)D q (f) 

= fD q {x) + M q {x)D q (f) - M q {x)D q (f) 

= /■ 

We can define a Hamiltonian operator via the anticommutator H = {D q ,x-} to get 

Hf = D q (xf) + xD q (f) 

= fD q (x) + qxD q (f) + xD q (f) 
= f+[2]xD q (f), 
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so the "energy" of a finite field element x n (9) is 



Hx 11 = x n + [2]xD q (x n ) 
= (l + [2][n])x B 
= (1 + (1 + q)[n])x 
= (1 + [n] +q[n])x' 
= ([n + 1] + [n})x n 



7 g-Antiderivative 

The (/-derivative of a finite field element is an element itself. If we add the constant 1, 
the derivative does not change, so at most half of the elements have antiderivatives. If an 
element has an antiderivative, then it is unique up to an additive constant: suppose / has 
two antiderivatives Fi and F 2 . Then let <f> — Fi — F 2 . Now D q (<f)) = 0; but any function for 
which that holds true is a constant by definition. 

The integral operator J (d q -) is the Moore-Penrose inverse of D q . Thus the equation 
Dg(F) = f has a solution iff / = D q (j q (fd q ))). 

8 Higher derivatives 

Because [n] is a function of x, there are correction terms on the higher derivatives. For 
instance, 

D 2 q (x n ) = D q (D q (x n )) 
= D q {[n]x n - X ) 

= [n\D q {x n - x ) + M q {x n - x )D q {[n\) 
= [n][n- l]x n ~ 2 + {qx) n - l D q {[n}) 

It is these extra terms that give rise to trigonometric-like functions. We've already seen 
exp; there are others like sinh and cosh with larger periods. 

There will be a subspace, however, for which iterated derivatives eventually yield zero. 
This subspace always includes the vectors {x, 1}, and may include more. 

We can define an inner product in this subspace. Let J q = J (d q -) and without loss of 
generality, let n > m. Then 

(JZ,J™) = (l,D^J™)=5 n , m . 

The function exp is an eigenvector of D q , so it is orthogonal to the subspace: 

(J^exp) = (l,Z£exp) = (l,exp) = 0. 

Other trigonometric functions are defined by the period with which they repeat, sinh, for 
example, is an eigenvector of D 2 , and a similar identity holds. 
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9 Logarithmic (/-derivative 

The logarithmic derivative is defined as 

id^. 

x 

The logarithmic derivative of a product of terms is the g-deformed sum of the logarithmic 
derivatives of the terms: 

T~) ( rpTl . rr m\ 

\d{x n ■ x m ) - q[ } 



M q (x n )D q (x m ) + x m D q (x r > 

Mg(x n 



\d(x m ) + \d(x n ) 

= q n ld(x m ) + ld(x n ) 
= ld(x m ) + q m ld{x n ) 

The logarithmic derivative of powers of exp has a nice form: 

, ,/ n.N D q (exp n ) ([n]x n )(exp) 

Id exp = — = = [n (exp) 

exp n exp n 

which suggests a "natural discrete (/-logarithm" for finite field elements. However, while this 
logarithm is easy to compute, the (/-deformed multiplication necessary to solve the Diffie- 
Hellman problem is hard. 

10 Examples 

We consider the field GF(2 4 ) with the field polynomial x 4 — x — 1. There are three possible 
values q may take: x 1 ,^ 3 , and x 7 . Each gives rise to different structures. 



8 
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10.1 q = x 

We have constants 0, 1. "Trig" functions include 9 10 = 0111 = exp, 9 13 = 1111 = sinh, and 
9 3 = 1000 = cosh. The names we've chosen are fairly arbitrary; they are only meant to reflect 
the period with which the derivative returns to itself. The element 9 has no antiderivative, 
so we have an inner product acting on the subspace {1, x} of the space {1, a;, exp, sinh}. 

10.2 q = x 3 

Nonzero constants are 9° = 1, 9 5 = 0110, and 9 10 = 0111, the cube roots of 1. There are no 
trig functions. A basis for the space is {1, x}. 

10.3 q = x 7 

We have the constants 0, 1 and the trig function exp. In this case, J q 9 = 9 6 , so we have 
the inner product on a three-dimensional subspace {l,x,x 6 }, while the complete basis is 
{1, x, x 6 , exp}. 
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